Analysis
-
max time kernel
144s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
28-11-2022 16:11
Behavioral task
behavioral1
Sample
216c5a04a8d6140a5fe4d3fd871d282e029d8fdf711070a942d77d336a13c0d0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
216c5a04a8d6140a5fe4d3fd871d282e029d8fdf711070a942d77d336a13c0d0.exe
Resource
win10v2004-20220812-en
General
-
Target
216c5a04a8d6140a5fe4d3fd871d282e029d8fdf711070a942d77d336a13c0d0.exe
-
Size
720KB
-
MD5
761c5534b8fcb5c46ce43584c6037d63
-
SHA1
74a99b3c2e5ba503a458e19c395e4ec0c206a7ca
-
SHA256
216c5a04a8d6140a5fe4d3fd871d282e029d8fdf711070a942d77d336a13c0d0
-
SHA512
a1023d0975f37ce87862152c365e27c53f57f5b1288cf4d07784b2497757acb1283a00f1fe5f642146a00685b02540efe1ead4984565acc030acd982fd1b454d
-
SSDEEP
6144:mDCS5YcCQ7iLsjVaHkiyYNe3VFi1ROw3F6ZrjybwVhUvKWItfLpQ9d3LtlEAZaCF:mW0oLNa5VhUvCsd7tFZV0oLNa
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
Processes:
216c5a04a8d6140a5fe4d3fd871d282e029d8fdf711070a942d77d336a13c0d0.exepid process 3592 216c5a04a8d6140a5fe4d3fd871d282e029d8fdf711070a942d77d336a13c0d0.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\50e5f3ce-8010-49d2-8881-59244a78fe57\AgileDotNetRT.dllFilesize
121KB
MD5b00823b0095b4bfaa0c0044e8c9759a5
SHA110dfacf94196d3f4a4cf09b9a502eb0c4a1d7e6e
SHA256fbe82a7b20535f59650af688d4068038d9dca9a5d9bc3083645f8ee87a54f076
SHA51269301f1d7077e7cb1cc208a143383a8bb0a4d3a75fe88d0a5df180c370d13d5368116cf13b9bbf9e26a84a83cc4328f5f151582c75dd47385f2f9a8966de4dd8
-
memory/3592-132-0x0000000074B40000-0x00000000750F1000-memory.dmpFilesize
5.7MB
-
memory/3592-134-0x0000000073860000-0x00000000738BB000-memory.dmpFilesize
364KB
-
memory/3592-135-0x0000000073040000-0x0000000073074000-memory.dmpFilesize
208KB
-
memory/3592-136-0x0000000074B40000-0x00000000750F1000-memory.dmpFilesize
5.7MB
-
memory/3592-137-0x0000000073040000-0x0000000073074000-memory.dmpFilesize
208KB